cve-2026-29204-whmcs-clientarea-addonid

CVE-2026-29204 — WHMCS client area addon guard Unofficial community notes for CVE-2026-29204: on clientarea.php?action=productdetails, a logged-in client can supply a foreign addonId with modop=custom and reach module context that does not belong to the session. Upgrade first. Apply a...